$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft File: fRSfYkR4U2icEvsoiv62toHP68E.mft (raw, json) Hash identifier: +wCIBalA5juaEDiUBr065GUZa016ns2xk/1yk+oQlsY= Subject key identifier: 17:2C:2D:1C:7F:C7:A9:5A:A5:31:1E:89:7D:B8:2E:70:13:99:00:E9 Authority key identifier: 7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1 Certificate issuer: /CN=7d149f62447853689c12fb288afeb6b681cfebc1 Certificate serial: 0198D7E106BB37E5A68ABE33AB02710D7081 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft Manifest number: 15E9 Signing time: Sat 23 Aug 2025 17:01:45 +0000 Manifest this update: Sat 23 Aug 2025 17:01:45 +0000 Manifest next update: Sun 24 Aug 2025 17:01:45 +0000 Files and hashes: 1: 2CeWoGzDWl6UkY36SIUH1OhgWjI.roa (hash: SpuPtcO5oh6qYeICaLjHEnb1AyuNec5O8bsGPbWlXR0=) 2: 2OyaFSjBRoREDHEMRffL3EbO-HE.roa (hash: nXI4OkiYa5c+MjdVzqLFFZ3ZGswBHizjRFddCRvE7B8=) 3: 3wwIi79zg2SGivGdrN-g0LB5ULQ.roa (hash: RzCIbHY1nS76gIylPt0Y25UbcEOAlA6M3aFOCeIxSG4=) 4: 7gAx1Pyx4u0TcyoGJm-7xTCnp00.roa (hash: gAGdIZGspYyJlvskZ74rsTfXVPxswIlGbLI3PkYprvU=) 5: EUICRwNR8sR91Lfm3GIv3mdVr9k.roa (hash: ua1xjRnUek2cLwApq/HW3bjCZKfJsqGGvp16wgKp8P0=) 6: HYkelKhWY7NiPV2rIoXC5vMsggM.roa (hash: 8m611pZGVk4ujPG9J04iZxFPYTUOzYbyGd2fDqvqZP4=) 7: Jhq91rxsv2WDUPAoN1fbsyaCM6g.roa (hash: nybfHNUP7zn/KmMoeiwkEEs96tiChMxH1OSoiBocUXI=) 8: Melq7PLQcz-P184ktmpNOP2H3e4.roa (hash: bGaw09MG/JnAsEfDppYWkhFJuztc0B+a9Nz0AQOqrUY=) 9: Q4BLVnTtEyoC8eHyhkcteKoeJ6A.roa (hash: edQEuSj12spKEsnnwc1oyC8FT8MhVl13a4ooOoJq0ys=) 10: RWf3DVveZH4QLyKGQca82kY-7Qw.roa (hash: V22GqObY+hDoy85YYLCgPS5lAieuM7VmlAbZz3/L7ZM=) 11: fRSfYkR4U2icEvsoiv62toHP68E.crl (hash: Rvl7TO29s3ZXsunjQSvq2qQLwy5poIzAqpGxT0JOPyE=) 12: jbUG9pTk9em_fTHbjoEIhua3pK0.roa (hash: 4tGn3tkK46T9dFOLGdw2zw9ukjnxUtA/PXFwlS5np88=) 13: l63ezx_M0iAM5dKGQZtcWd8xPmQ.roa (hash: qf8bDHKpJxynQt1q7hXqJrXbCZfUxZZ7MBpbrfJkMcU=) 14: lkgJ8Vsd8ocb4eicMkQ6N3ZL26E.roa (hash: 9Yz4K7Z8z/hwTeoXB4iHYgi23xVHLoum6nVhNj0Tjmc=) 15: txxKQQE40wffgCtcTH6E5WrYYhY.roa (hash: td5UTouO1Nf7RuKTOrzSb6h5NfM7Vvfby16oyueCQko=) 16: zBonQZgEPDvj1nGNR_bu7NzMU0U.roa (hash: s94OjMSrqoWnsXwDlW8kAk2CQ0Z0teuNflnJXhN+I6g=) 17: zg1raSPKfpMRz7s0HIi-A3JYptA.roa (hash: kmxhHZd/GJPpQ6FeMLmxw983rJJvr08+WYaMz1jD/YA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d7:e1:06:bb:37:e5:a6:8a:be:33:ab:02:71:0d:70:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d149f62447853689c12fb288afeb6b681cfebc1 Validity Not Before: Aug 23 17:01:45 2025 GMT Not After : Aug 24 17:01:45 2025 GMT Subject: CN=172c2d1c7fc7a95aa5311e897db82e70139900e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:10:37:64:d8:cd:7d:2c:ee:4d:6f:92:13:43: 7f:54:e6:de:10:b5:b0:89:78:bd:08:c6:c8:45:f2: a7:fa:9c:b1:ef:42:e4:98:75:a1:b0:dc:4a:37:32: 7e:61:31:02:c5:7e:82:de:8f:db:45:c1:96:e9:37: db:e7:b2:c6:39:b3:90:74:41:ac:e6:00:aa:c1:7a: cf:78:39:24:66:c1:2a:fb:84:34:6e:72:14:b8:75: a9:19:bd:00:84:7d:6e:7a:23:7c:ec:d3:2b:a8:22: 24:52:96:4c:ec:37:99:5a:39:96:f3:b8:00:c2:c8: a9:a6:19:8d:b1:77:97:af:c3:cd:0f:1e:83:2e:66: cd:a7:6a:6e:96:9f:14:85:35:54:9c:64:48:b5:81: 21:d0:a8:ba:77:ed:78:1c:b6:f3:a3:a9:58:5c:01: 02:68:80:6a:33:5f:77:de:24:ac:f9:e0:7e:a6:4e: eb:1c:66:63:8f:05:44:93:95:61:94:ee:04:3b:55: 4d:83:1d:37:cc:c9:96:90:56:12:87:bd:e4:13:45: c7:5d:f4:09:0b:f7:4a:7e:53:37:2c:09:39:2b:ce: b8:d9:9a:dc:2d:12:53:e5:bd:d7:45:c3:2a:10:9e: f8:bd:42:ab:ba:4b:f6:cc:a2:42:74:f0:e1:be:d7: fc:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:2C:2D:1C:7F:C7:A9:5A:A5:31:1E:89:7D:B8:2E:70:13:99:00:E9 X509v3 Authority Key Identifier: keyid:7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:74:0e:08:ac:85:7e:f4:45:1f:36:a2:62:0d:0b:f0:c9:65: 12:43:2a:7c:72:8c:46:24:d2:0c:bb:97:b3:3b:d8:f4:0a:0d: cb:ab:c1:6a:f9:b3:70:6c:d5:8c:f3:25:45:5d:1e:36:39:a9: b0:ab:aa:bd:a1:78:12:71:11:ad:8d:93:32:4c:0d:1d:84:7b: 7b:be:af:71:02:65:33:54:e6:37:ad:55:57:13:00:3d:4f:20: ec:b0:d7:92:4c:b6:01:8d:07:0e:99:3e:e8:a2:ac:10:8f:5a: ff:50:27:71:97:86:33:59:d5:2e:bd:cf:f4:c1:d9:5d:89:ce: c7:b7:b8:f3:c4:49:cd:8c:52:5f:64:b4:aa:6d:76:b1:be:72: 46:9e:61:b3:6b:b7:c3:b6:06:be:c7:8f:74:dd:e5:ed:00:db: cd:dc:cf:af:e6:f6:d2:31:11:a8:02:50:60:a2:0b:44:3e:74: 87:7c:7f:de:dc:9e:1a:d6:08:19:5a:52:e6:73:fb:a6:c4:92: 89:2c:c6:b7:18:f8:26:64:45:44:4f:93:0b:9b:fa:ee:d1:61: d1:2f:77:e4:ce:07:b7:5b:1e:67:73:37:4f:13:4e:e9:50:ac: 16:f1:7c:b7:e1:a4:3f:37:85:59:b2:e6:a4:e2:4d:6a:9a:ed: 7a:c2:d3:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjX4Qa7N+Wmir4zqwJxDXCBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMTQ5ZjYyNDQ3ODUzNjg5YzEyZmIyODhhZmViNmI2ODFj ZmViYzEwHhcNMjUwODIzMTcwMTQ1WhcNMjUwODI0MTcwMTQ1WjAzMTEwLwYDVQQD EygxNzJjMmQxYzdmYzdhOTVhYTUzMTFlODk3ZGI4MmU3MDEzOTkwMGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhA3ZNjNfSzuTW+SE0N/VObeELWw iXi9CMbIRfKn+pyx70LkmHWhsNxKNzJ+YTECxX6C3o/bRcGW6Tfb57LGObOQdEGs 5gCqwXrPeDkkZsEq+4Q0bnIUuHWpGb0AhH1ueiN87NMrqCIkUpZM7DeZWjmW87gA wsipphmNsXeXr8PNDx6DLmbNp2pulp8UhTVUnGRItYEh0Ki6d+14HLbzo6lYXAEC aIBqM1933iSs+eB+pk7rHGZjjwVEk5VhlO4EO1VNgx03zMmWkFYSh73kE0XHXfQJ C/dKflM3LAk5K8642ZrcLRJT5b3XRcMqEJ74vUKrukv2zKJCdPDhvtf8nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBcsLRx/x6lapTEeiX24LnATmQDpMB8GA1UdIwQY MBaAFH0Un2JEeFNonBL7KIr+traBz+vBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC82YTU0YmYtZjAwZi00NjdhLWJmNTct YWFiMGU0MTRjYzYzLzEvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC82YTU0YmYtZjAwZi00NjdhLWJmNTctYWFiMGU0MTRjYzYz LzEvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFXQOCKyF fvRFHzaiYg0L8MllEkMqfHKMRiTSDLuXszvY9AoNy6vBavmzcGzVjPMlRV0eNjmp sKuqvaF4EnERrY2TMkwNHYR7e76vcQJlM1TmN61VVxMAPU8g7LDXkky2AY0HDpk+ 6KKsEI9a/1AncZeGM1nVLr3P9MHZXYnOx7e488RJzYxSX2S0qm12sb5yRp5hs2u3 w7YGvsePdN3l7QDbzdzPr+b20jERqAJQYKILRD50h3x/3tyeGtYIGVpS5nP7psSS iSzGtxj4JmRFRE+TC5v67tFh0S935M4Ht1seZ3M3TxNO6VCsFvF8t+GkPzeFWbLm pOJNaprtesLTNg== -----END CERTIFICATE-----Generated at Sat Aug 23 19:24:54 2025 by rpki-client